Remote AI and Full-Stack Developer for UK Businesses

What can you hire me to build?

AI agents and chatbots first, then the software around them: SaaS products, web apps, CRMs, automations and websites. For UK hosting companies, I also build on WHMCS. Each line of work has its own page with the scope and the limits.

I do not sell small one-off fixes as a separate service. Work starts from a written scope, even when the scope is short.

How do our working hours overlap?

Your morning is afternoon in India, so calls fall inside both our working days. India stays on UTC+5:30 all year. GOV.UK lists the UK clock changes: back on 25 October 2026, forward on 28 March 2027 and back again on 31 October 2027. India is five and a half hours ahead in UK winter and four and a half in UK summer.

Your morning is the easiest fit. We agree a call slot in the quote, and a written update each working day covers the rest. England, Scotland, Wales and Northern Ireland all keep the same clock.

What do VAT, IR35 and withholding mean for a UK company paying me?

Three questions usually come up when a UK company pays a developer abroad. The answers below are what HMRC guidance and UK law set out, not advice about your return. Your accountant applies them.

• VAT. HMRC's VAT Notice 741A says the general rule for business-to-business services is that "the supply is made where the customer belongs", and that the amount payable to an overseas supplier "excludes UK VAT". You account for the VAT under the reverse charge in boxes 1, 4, 6 and 7 of your return. If you can reclaim the input tax in full, it costs nothing net. The notice also says invoices "should avoid general or generic descriptions and make clear the nature of the services involved", because the kind of service decides which rule applies, so mine name the work, such as "development of the support ticket agent", not "services".
• If you are not VAT registered. The same notice says services bought from overseas suppliers count toward the registration threshold, which is £90,000. Worth checking if you buy a lot of work from abroad.
• IR35. HMRC's Employment Status Manual (ESM10025) says: "A worker who is not UK-resident and is performing work outside the UK is unlikely to fall within the charge to UK tax or NICs. If the worker is not chargeable to UK tax or NICs, then the off-payroll working rules will not apply."
• Withholding tax. None of the deduction duties listed in section 847 of the Income Tax Act 2007 covers ordinary fees for services. They cover payments such as yearly interest, royalties and other intellectual property payments, and HMRC can direct a deduction in avoidance cases. That is a reading of the statute, not an HMRC statement. The quote is for a service, with the custom code becoming yours, not a license of my code.

Can a developer in India work on your customer data?

Yes, with three documents in place. The ICO's own worked example is close to this case: a UK business that lets an organization in India, which supports its customer service, access the personal information on its systems is making a restricted transfer, even if nothing is sent. India has no UK adequacy regulations, so the transfer needs a safeguard:

• A processor contract under Article 28 of the UK GDPR, which says what I may do with the data and on whose instructions.
• The ICO's international data transfer agreement, or the EU standard contractual clauses with the UK addendum. The ICO says to keep using the current versions while it updates them.
• A transfer risk assessment that you record. Since 5 February 2026 the test is whether the protection is "not materially lower" than in the UK.

I sign the first two and give you the information you need for the third. Access is limited to what each task needs, and test or pseudonymized data comes first where the job allows it.

Which changes from the Data (Use and Access) Act show up in software?

The ICO says all the data protection provisions of the Data (Use and Access) Act 2025 were in force by 19 June 2026, and since 30 September 2026 the ICO's functions sit with the new Information Commission. Four of the changes affect what gets built:

• Analytics cookies. Since 5 February 2026, cookies used only for statistics about your own service can be set without consent, as long as visitors get clear information about them and "a simple means of objecting, free of charge". Advertising and tracking cookies still need consent. The EU has not made this change, so a site with EU visitors needs care.
• Bigger fines. Breaches of the cookie and marketing rules (PECR) can now cost up to £17.5 million or 4% of global turnover.
• Automated decisions. New Articles 22A to 22D allow solely automated decisions in more cases, with safeguards: the person is told about the decision and can make representations, get human intervention and contest it. An agent that makes significant decisions about people with no meaningful human involvement needs that route built in.
• Complaints. Since 19 June 2026, every controller must give people a way to make data protection complaints and acknowledge each one within 30 days. A form with a tracked queue is a small build.

Which rules apply to an AI chatbot or agent in the UK?

The UK has no AI Act. The government's stated approach is regulation through the existing regulators, and the 2026 King's Speech named no AI bill. For a typical business chatbot, what applies today is data protection law, plus the Online Safety Act in some designs.

• Online Safety Act. Ofcom said on 3 February 2026 that chatbots "are not subject to regulation at all" if they only let people interact with the chatbot itself, do not search multiple websites or databases, and cannot generate pornographic content. A bot whose answers users can share with each other, or one that searches across outside websites, can fall within the Act. The government has taken powers to bring more chatbots under illegal-content duties, with no date yet for them to take effect, and says chatbots used in business or customer service settings will be exempt from its new child-protection measures. I check the position again before each launch.
• Data protection. The ICO's guidance on AI and data protection applies, and the ICO says it is under review after the 2025 Act. An agent that makes significant decisions about people needs the Article 22A to 22D safeguards above.
• Selling into the EU. The EU AI Act still reaches UK businesses whose AI systems are used in the EU. Since 2 August 2026, a chatbot talking to people there must tell them it is AI, unless that is obvious. My page for EU businesses has the details.

Which consumer and accessibility rules shape a UK website?

Reviews and prices

The unfair commercial practices rules in the Digital Markets, Competition and Consumers Act 2024 have applied since 6 April 2025, and the CMA and the courts can now fine traders up to 10% of worldwide turnover. Two of those rules change how a site is built:

• Reviews. A business that publishes consumer reviews must take reasonable steps to stop fake ones from appearing. I do not build tools that write reviews, and the review sections I build have moderation.
• Drip pricing. The first price shown must include mandatory fees. On a WHMCS order form that sells to consumers, a compulsory setup fee belongs in the headline price, not at the last step.

Subscriptions: expected from 1 January 2027

Draft government guidance, published on 19 October 2026, says new rules apply to consumer subscriptions entered into from 1 January 2027, once Parliament approves the draft regulations. Traders must give clear information before sign-up, send reminders when a free or discounted trial ends and before a contract renews onto 12 months or longer, allow a 14-day cooling-off period at the start and another after such a trial or renewal, and make ending the contract straightforward, online if they signed up online. Business-to-business contracts are excluded. For a SaaS product or a hosting company that sells to consumers, I build the reminder notices, the online cancellation page and the cooling-off refunds.

Accessibility

The Equality Act 2010 sets no WCAG level for private businesses. It requires reasonable adjustments, thought about in advance. The EHRC's statutory Code of Practice, in force since 5 August 2026, gives a website with its text embedded in graphics as an example of indirect discrimination unless the provider can justify it. Public sector sites must meet WCAG 2.2 AA, and that is the level I build toward: real headings, labeled forms, keyboard access, text as text and enough contrast. I do not certify compliance. If you sell online to consumers in the EU, the European Accessibility Act applies as well, unless you have fewer than 10 staff and an annual turnover or balance sheet of €2 million or less.

What can I set up for UK hosting companies on WHMCS?

Beyond the usual modules and integrations, UK hosting companies ask me about billing and domain details that differ in the UK.

• UK VAT numbers. WHMCS says HMRC shut down an API endpoint it relied on, on 17 February 2025, so versions before 8.13 can no longer validate UK VAT numbers. From 8.13, WHMCS checks them against HMRC's records. I set VAT mode, the 20% rule, remote verification and Home Country Exclusion, so UK customers are charged VAT even when they give a VAT number.
• .uk domains. Nominet's rules say any person may register a .uk name, and no UK address is needed. The WHMCS Nominet module registers, renews and transfers in .uk names, and supports Domain Release, Nominet's tag change for moving a name out. Nominet has announced a new .uk registration policy, so I check the domain fields again before it takes effect.
• Direct Debit. WHMCS has an official GoCardless module that supports GBP, and no Stripe module for Bacs. For a custom app, Stripe supports Bacs Direct Debit with recurring billing. Stripe says there is no set time limit for customers to dispute a Bacs payment and that disputes cannot be countered, so suspension and refund rules need care.
• Card fees. UK rules ban charging a fee for paying with a non-commercial card or a similar method, such as PayPal, when the payment providers of both sides are in the UK. A "card fee" line on WHMCS invoices needs your adviser's check first.

Scope, safety and proof for WHMCS work are on my hire a WHMCS developer page.

Which UK company can you check?

Krunus is a hosting company registered in England and Wales. I built its website and the path from plan page to client area, with plan prices shown with UK VAT. My other work is in my portfolio, and my Upwork and Fiverr profiles carry the public reviews: Top Rated on both, with 580+ five-star reviews on Fiverr.

When am I the wrong choice for you?

• You need someone in your office, or on call around the clock without a separate support agreement.
• You need a large team at once. I am one developer.
• Your contract or security clearance requires a UK-based supplier or UK nationals.
• The cheapest hourly rate decides. My rate is $55-$65, which buys one senior developer who scopes, builds and supports the work.

Disclosure: I am an independent developer, not affiliated with OpenAI or Anthropic. I am CTO at ElySpace, a freelance developer for Marmaids LLC, and founder of WHMCSPilot and MagizAI. Tax, data protection, consumer and accessibility points on this page summarize HMRC, the ICO, Ofcom, the CMA, the government's draft subscription guidance, the EHRC, Nominet, WHMCS and the payment and cloud providers as read on 29 October 2026. They are not legal or tax advice.